Not everyone can set up their own VPN endpoint. For those who can, and are willing to maintain it, great!
More: https://blog.getcloak.com/2013/03/04/why-trust-matters-when-...
(And what does AWS have to do with anything?)